VIR Vulnerability Intelligence Relay

CVE-2013-6458

medium
Published 2014-01-24 · Modified 2026-04-29
CVSS v3
—
CVSS v2
6.8
VIR risk
6.8

Description

Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2013-6458

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — https://bugzilla.redhat.com/show_bug.cgi?id=1043069

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://secunia.com/advisories/56446

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://secunia.com/advisories/56186

OS impact
OSVersionStatusFixed in
debian debianbookwormfixed1.2.1-1
debian debianbullseyefixed1.2.1-1
debian debianforkyfixed1.2.1-1
debian debiansidfixed1.2.1-1
debian debiantrixiefixed1.2.1-1

Application impact
VendorProductVersionsFixed
redhatlibvirt{"endIncluding":"1.2.0"}
redhatlibvirt0.0.1
redhatlibvirt0.0.2
redhatlibvirt0.0.3
redhatlibvirt0.0.4
redhatlibvirt0.0.5
redhatlibvirt0.0.6
redhatlibvirt0.1.0
redhatlibvirt0.1.1
redhatlibvirt0.1.3
redhatlibvirt0.1.4
redhatlibvirt0.1.5
redhatlibvirt0.1.6
redhatlibvirt0.1.7
redhatlibvirt0.1.8
redhatlibvirt0.1.9
redhatlibvirt0.2.0
redhatlibvirt0.2.1
redhatlibvirt0.2.2
redhatlibvirt0.2.3
redhatlibvirt0.3.0
redhatlibvirt0.3.1
redhatlibvirt0.3.2
redhatlibvirt0.3.3
redhatlibvirt0.4.0
redhatlibvirt0.4.1
redhatlibvirt0.4.2
redhatlibvirt0.4.3
redhatlibvirt0.4.4
redhatlibvirt0.4.5
redhatlibvirt0.4.6
redhatlibvirt0.5.0
redhatlibvirt0.5.1
redhatlibvirt0.6.0
redhatlibvirt0.6.1
redhatlibvirt0.6.2
redhatlibvirt0.6.3
redhatlibvirt0.6.4
redhatlibvirt0.6.5
redhatlibvirt0.7.0
redhatlibvirt0.7.1
redhatlibvirt0.7.2
redhatlibvirt0.7.3
redhatlibvirt0.7.4
redhatlibvirt0.7.5
redhatlibvirt0.7.6
redhatlibvirt0.7.7
redhatlibvirt0.8.0
redhatlibvirt0.8.1
redhatlibvirt0.8.2
redhatlibvirt0.8.3
redhatlibvirt0.8.4
redhatlibvirt0.8.5
redhatlibvirt0.8.6
redhatlibvirt0.8.7
redhatlibvirt0.8.8
redhatlibvirt0.9.0
redhatlibvirt0.9.1
redhatlibvirt0.9.2
redhatlibvirt0.9.3
redhatlibvirt0.9.4
redhatlibvirt0.9.5
redhatlibvirt0.9.6
redhatlibvirt0.9.6.1
redhatlibvirt0.9.6.2
redhatlibvirt0.9.6.3
redhatlibvirt0.9.7
redhatlibvirt0.9.8
redhatlibvirt0.9.9
redhatlibvirt0.9.10
redhatlibvirt0.9.11
redhatlibvirt0.9.11.1
redhatlibvirt0.9.11.2
redhatlibvirt0.9.11.3
redhatlibvirt0.9.11.4
redhatlibvirt0.9.11.5
redhatlibvirt0.9.11.6
redhatlibvirt0.9.11.7
redhatlibvirt0.9.11.8
redhatlibvirt0.9.12
redhatlibvirt0.9.13
redhatlibvirt0.10.0
redhatlibvirt0.10.1
redhatlibvirt0.10.2
redhatlibvirt0.10.2.1
redhatlibvirt0.10.2.2
redhatlibvirt0.10.2.3
redhatlibvirt0.10.2.4
redhatlibvirt0.10.2.5
redhatlibvirt0.10.2.6
redhatlibvirt0.10.2.7
redhatlibvirt0.10.2.8
redhatlibvirt1.0.0
redhatlibvirt1.0.1
redhatlibvirt1.0.2
redhatlibvirt1.0.3
redhatlibvirt1.0.4
redhatlibvirt1.0.5
redhatlibvirt1.0.5.1
redhatlibvirt1.0.5.2
redhatlibvirt1.0.5.3
redhatlibvirt1.0.5.4
redhatlibvirt1.0.5.5
redhatlibvirt1.0.5.6
redhatlibvirt1.0.6
redhatlibvirt1.1.0
redhatlibvirt1.1.1
redhatlibvirt1.1.2
redhatlibvirt1.1.3
redhatlibvirt1.1.4

References

CWEs

CWE-362

Verify integrity in audit chain (admin only). AS-IS.